#37727 introduced PEM verification but we'd like to move the verification code closer to the SSL auto-configure code.